[pkg-php-pear] php-twig_3.27.0-1_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 27 May 2026 23:07:15 +0200
Source: php-twig
Architecture: source
Version: 3.27.0-1
Distribution: unstable
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear at lists.alioth.debian.org>
Changed-By: David Prévot <taffit at debian.org>
Changes:
 php-twig (3.27.0-1) unstable; urgency=medium
 .
   [ Fabien Potencier ]
   * Fix sandbox bypass in deprecated internal wrappers [CVE-2026-48805]
   * Fix sandbox bypass in the "column" filter under SourcePolicyInterface
     [CVE-2026-48808]
   * Fix sandbox __toString bypass via Traversable in join/replace filters
   * Fix sandbox `__toString` bypass via the `in` and `not in` operators
     [CVE-2026-48807]
   * Fix sandbox __toString policy bypass via dynamic mapping keys
     [CVE-2026-48806]
   * Fix sandbox filter/tag/function allow-list bypass when sandbox state
     changes between renders [CVE-2026-46636]
   * Prepare the 3.27.0 release
 .
   [ David Prévot ]
   * Add missing space in previous changelog entry
Checksums-Sha1:
 b7207df990448664ec7fa08f72525e0b30ae5124 2949 php-twig_3.27.0-1.dsc
 65958235ae13b3d5df88b4597cb8f9275c2b86ec 295220 php-twig_3.27.0.orig.tar.xz
 09c78f73c320f049235111dc32831719bea7fd89 33528 php-twig_3.27.0-1.debian.tar.xz
 0cd421c71863d56326b54f483aa5226792c3c396 12840 php-twig_3.27.0-1_amd64.buildinfo
Checksums-Sha256:
 deb6a25d9bd84253254560465b8645b8babd71ad088c058b8a2a1ede45fe9032 2949 php-twig_3.27.0-1.dsc
 34c8a7e6570787bb9f3502d991832c42d5066f008132c2cad09b5d793c775705 295220 php-twig_3.27.0.orig.tar.xz
 b74e8d3ce9f2b7d8d1327c0d1f1564fd7fb4fb7ce4b0440535e38c7c82cd8796 33528 php-twig_3.27.0-1.debian.tar.xz
 96b6309374a2d6e536b4d17b1064bb407481de55a3c547402f6b135693b37e6a 12840 php-twig_3.27.0-1_amd64.buildinfo
Files:
 16bf4d7f0d3ee0db3e2920083e0046ca 2949 php optional php-twig_3.27.0-1.dsc
 a0fd43ce95ac7a80c70bf85b89ce6859 295220 php optional php-twig_3.27.0.orig.tar.xz
 fe3b9bd2aee91baf2c0b37ee100bfe58 33528 php optional php-twig_3.27.0-1.debian.tar.xz
 218d0e75631780d381ea85cb389dd6b0 12840 php optional php-twig_3.27.0-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmoXYSMSHHRhZmZpdEBk
ZWJpYW4ub3JnAAoJEAWMHPlE9r08SaMH/0RcjOj1EplStFjdOuGfoomh25DabKgz
M7SR5sUd/sAxK0meuu0OFoZ2QNV5nIqCsb/HTl7gDcGg/dcvyoGyooOt8SVxPBXC
h8cXdBmMsix9MuLMWsEfrF1QF92IId/UB6pMvrrF4B6EvBQ/l+PLIoEVVVkO2ONK
FDRJ1xCl85RjzRkKscdpNavrk3hiOk10yKC3c3bUR4pfgDqbx0VV3ksDoRFlv0Hy
D54TwNy37fMnAb5oohhYam9AOPoT6KRZlWrxSOmtJvjhjXId/MmS8Us/JLUnd9EY
yoODj1CShPL8zzhZYEj8dA9D7Odbiip8D8AVFHAL4MK6TrIJ/RvUCyI=
=meQM
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-php-pear/attachments/20260527/2b065fa3/attachment-0001.sig>